Base de CVEs

O Flowise é uma interface de arrastar e soltar para construir fluxos personalizados de modelos de linguagem de grande porte. Antes da versão 3.1.2, existe uma vulnerabilidade de mass assignment no endpoint de atualização de assistentes do FlowiseAI. O endpoint permite que usuários autenticados modifiquem propriedades controladas pelo servidor, como workspaceId, createdDate e updatedDate, ao atualizar um recurso de assistente. Devido à ausência de validação do lado do servidor e de verificações de autorização, um atacante pode manipular o campo workspaceId e reatribuir assistentes a workspaces arbitrários. Isso quebra o isolamento entre tenants em ambientes com múltiplos workspaces. Este problema foi corrigido na versão 3.1.2.

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the variable update endpoint of FlowiseAI. The endpoint allows authenticated users to modify server-controlled properties such as workspaceId, createdDate, and updatedDate when updating a variable resource. Due to missing server-side validation and authorization checks, an attacker can manipulate the workspaceId field and reassign variables to arbitrary workspaces. This behavior may break tenant isolation in multi-workspace environments. This issue has been patched in version 3.1.2.

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the File Manager functionality in Termix contains a critical Broken Access Control vulnerability due to improper validation of the sessionId parameter. The backend trusts a client-controlled identifier without verifying that it belongs to the authenticated user. This allows an attacker to manipulate the value and access active File Manager sessions belonging to other users. Since these sessions are tied to SSH connections to remote VPS instances, exploitation allows unauthorized interaction with another user's remote filesystem. Because the File Manager exposes functionality such as file reading, writing, uploading, and execution, this vulnerability enables direct command execution on another user's VPS (RCE). Version 2.3.2 patches the issue.

A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.